Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
File: 0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json)
Hash identifier: /vW1djSMsJWZYULigRUiqnJd1Y4wwOwNbClsnZtnKJs=
Subject key identifier: 47:C4:61:21:7F:20:46:50:08:4A:A1:BA:56:3E:B8:57:8C:C8:42:F7
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Certificate issuer: /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial: 019D382E13F195304555D209DF04ED95DDF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
Manifest number: 0C9E
Signing time: Sun 29 Mar 2026 06:00:36 +0000
Manifest this update: Sun 29 Mar 2026 06:00:36 +0000
Manifest next update: Mon 30 Mar 2026 06:00:36 +0000
Files and hashes: 1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: uIEuEKVwKSeCiWo2Fhp72knSZZytQKxUlmXxLj15hq0=)
2: NGjB506tQD4M9JyQ0y5L8sd4Coc.roa (hash: bikmvDPhCClihvHahEW9OUu5noBCQJiGJ2NSrdBDNrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:13:f1:95:30:45:55:d2:09:df:04:ed:95:dd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Validity
Not Before: Mar 29 06:00:36 2026 GMT
Not After : Mar 30 06:00:36 2026 GMT
Subject: CN=47c461217f204650084aa1ba563eb8578cc842f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:85:10:d7:a5:23:0a:6b:f7:76:18:0c:37:
14:2a:43:38:e5:fc:ef:b9:91:28:bd:db:9f:15:0e:
e8:f7:c3:ed:cf:cd:18:89:0c:84:48:84:94:4c:43:
6f:e5:bf:a2:19:60:c3:13:0c:33:02:32:49:19:63:
04:23:f5:a8:8c:b3:3e:9a:c5:85:9e:b5:a3:8e:a9:
a1:c9:69:d6:35:78:77:7d:63:12:8c:15:20:67:74:
1b:95:b3:c9:0c:d0:cc:4d:74:1e:c9:3d:d7:05:1a:
71:1c:3d:6f:2d:e6:4a:92:41:fc:cd:70:4b:fc:6d:
e7:3d:0b:ca:8a:9e:76:fb:4e:6d:64:08:1d:7a:9c:
b7:47:84:41:a4:fe:27:43:91:9b:eb:79:1d:1b:d1:
3c:0c:5e:89:b1:5c:56:5f:b5:70:df:3e:12:79:4f:
21:aa:c0:62:7c:7a:1d:96:87:fb:12:f7:d3:1d:86:
e2:6d:5e:23:39:c6:62:6c:db:fd:4a:db:2e:22:c5:
00:4f:52:03:27:e8:5e:3c:2e:85:66:77:22:0d:99:
21:f9:fb:ad:03:cb:fd:cb:10:76:98:17:87:27:3f:
8d:b9:3c:f1:0e:e2:f7:18:92:5b:5f:20:9e:75:fc:
c4:2c:59:45:ba:19:73:30:4e:5f:a5:f4:fa:1b:7d:
54:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C4:61:21:7F:20:46:50:08:4A:A1:BA:56:3E:B8:57:8C:C8:42:F7
X509v3 Authority Key Identifier:
keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7e:49:3a:4c:f2:0a:04:8d:99:00:ca:07:b4:49:5b:34:d4:
91:71:96:2f:6d:de:49:db:f5:01:93:87:9a:35:8b:11:c2:f2:
da:08:ca:5b:32:7a:39:f0:42:c1:5e:96:87:79:b9:1f:c5:b4:
f8:11:2a:aa:0f:93:22:f2:72:b0:09:5d:a2:77:39:98:1c:ee:
32:9a:f0:c0:07:fe:4b:b3:30:99:8d:83:39:26:5b:2c:d1:fa:
86:f4:00:9d:b4:8b:eb:4a:dc:c5:d9:44:01:97:b2:9f:b3:da:
64:77:28:81:8d:60:99:75:5e:0c:a4:45:bc:90:19:0c:f7:66:
ab:f0:c3:56:ee:87:fc:c3:80:32:9b:16:30:8c:86:52:18:ea:
28:3a:13:e9:97:eb:05:90:79:9b:cc:f3:f9:24:37:08:16:e0:
d7:75:31:fb:b8:93:9e:04:07:1b:59:87:63:db:d2:88:95:dd:
52:43:51:bd:c2:56:40:a3:80:a9:33:49:20:d5:7c:da:a0:6b:
e7:7d:36:45:f2:47:82:f3:21:f0:72:b6:d8:1c:94:d4:b5:da:
e1:f4:53:fd:30:66:d2:27:d9:ef:1e:98:a1:60:a4:af:93:7e:
de:80:5e:d5:bd:e6:cc:04:7d:7a:08:12:ec:79:9a:b1:53:bf:
ee:59:88:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LhPxlTBFVdIJ3wTtld35MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMmQxZWIwZWM4ZWY1YTIzMDQ1N2E5NzAyZTdhYTM5Njg1
ODE4MGMwHhcNMjYwMzI5MDYwMDM2WhcNMjYwMzMwMDYwMDM2WjAzMTEwLwYDVQQD
Eyg0N2M0NjEyMTdmMjA0NjUwMDg0YWExYmE1NjNlYjg1NzhjYzg0MmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRSFENelIwpr93YYDDcUKkM45fzv
uZEovdufFQ7o98Ptz80YiQyESISUTENv5b+iGWDDEwwzAjJJGWMEI/WojLM+msWF
nrWjjqmhyWnWNXh3fWMSjBUgZ3QblbPJDNDMTXQeyT3XBRpxHD1vLeZKkkH8zXBL
/G3nPQvKip52+05tZAgdepy3R4RBpP4nQ5Gb63kdG9E8DF6JsVxWX7Vw3z4SeU8h
qsBifHodlof7EvfTHYbibV4jOcZibNv9StsuIsUAT1IDJ+hePC6FZnciDZkh+fut
A8v9yxB2mBeHJz+NuTzxDuL3GJJbXyCedfzELFlFuhlzME5fpfT6G31UwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfEYSF/IEZQCEqhulY+uFeMyEL3MB8GA1UdIwQY
MBaAFNMtHrDsjvWiMEV6lwLnqjloWBgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81MWQ0NDUtZjA3MC00Y2E5LWEwMmIt
MmUxZjliZTk1NTczLzEvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi81MWQ0NDUtZjA3MC00Y2E5LWEwMmItMmUxZjliZTk1NTcz
LzEvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfH5JOkzy
CgSNmQDKB7RJWzTUkXGWL23eSdv1AZOHmjWLEcLy2gjKWzJ6OfBCwV6Wh3m5H8W0
+BEqqg+TIvJysAldonc5mBzuMprwwAf+S7MwmY2DOSZbLNH6hvQAnbSL60rcxdlE
AZeyn7PaZHcogY1gmXVeDKRFvJAZDPdmq/DDVu6H/MOAMpsWMIyGUhjqKDoT6Zfr
BZB5m8zz+SQ3CBbg13Ux+7iTngQHG1mHY9vSiJXdUkNRvcJWQKOAqTNJINV82qBr
5302RfJHgvMh8HK22ByU1LXa4fRT/TBm0ifZ7x6YoWCkr5N+3oBe1b3mzAR9eggS
7HmasVO/7lmI9g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:13 2026 by rpki-client